24-1

Chapter 24: Configuring Private VLANs

Private VLANs provide port-based security and isolation between ports within the
assigned VLAN. Data traffic on downlink ports can only be forwarded to, and from,
uplink ports. (Note that private VLANs and normal VLANs can exi st simultaneously
within the same switch.)

Enabling Private VLANs

Use the Private VLAN Status page to enable/disable the Private VLAN function.
Web – Click VLAN, Private VLAN, Status. Select Enable or Disable from the
scroll-down box, and click Apply.
Figure 24-1 Private VLAN Status
CLI – This example enables private VLANs.
Console(config)#pvlan 53-1
Console(config)#
UplinkPorts
PrimaryVLAN
(promiscuousports)
x
DownlinkPorts
SecondaryVLAN
(privateports)